This document describes how to use the Tencent Cloud root account to authorize sub-accounts at the operation level. You can grant different read and write permissions to sub-accounts as needed.
Directions
Full access permission
Note
After granting full access permissions to a sub-account, the sub-account will have full read and write capabilities to all resources under the root account.
1. Log in to the CAM Console with the root account.
2. In the left sidebar, click Policies to go to the policy management page.
3. Search for QcloudTDMQFullAccess on the right.
4. In the search results, click the Associated Users/Groups of QcloudTDMQFullAccess and select the sub-account to be authorized.
5. Click OK to complete the authorization, which will be displayed in the Policy List of the user.
Read-only permission
Note
After granting the read-only permission to a sub-account, the sub-account will have read-only capability to all resources under the root account.
1. Log in to the CAM Console with the root account.
2. In the left sidebar, click Policies to go to the policy management page.
3. Search for QcloudTDMQReadOnlyAccess on the right.
4. In the search results, click the Associated Users/Groups of QcloudTDMQReadOnlyAccess and select the sub-account to be authorized.
5. Click OK to complete the authorization, which will be displayed in the Policy List of the user.
